Privacy Policy

Last updated: 28/10/2026

This Privacy Policy explains how ECx (“ECx”, “we”, “us”, “our”) collects, uses, stores and protects information when you use the ECx platform and related services (the “Service”). By creating an account or using the Service, you agree to this Policy.

ECx is a business tool. The projects, test sheets, checklists, equipment records and photos you upload (“Customer Data”) belong to you (or the company you work for). We act as a processor of that data on your behalf and only handle it to provide the Service.

1. Information we collect

Account information

Your name, username, email address and password (stored only as a secure one-way hash).
Your company (organisation) name and the branding details you choose to add (logo, tagline, contact info).

Customer Data you upload

Projects, equipment, test sheets, checklists, reports and the photos you attach to them.

Technical information

Basic log data such as IP address, browser type and timestamps, used for security and to operate the Service.

We do not intentionally collect special-category personal data, and you should not upload such data unless it is necessary for your work.

2. How we use information

To provide, maintain and secure the Service (including generating your PDF reports).
To authenticate you, send account emails (verification, password resets) and respond to support requests.
To detect, prevent and address technical issues, abuse or security incidents.

We do not sell your data, and we do not use your Customer Data for advertising.

3. How your data is stored and protected

Encryption in transit: the Service is served over HTTPS.
Access-controlled storage: uploaded photos and documents are held in private, access-controlled cloud storage and are served only to authorised users of your workspace.
Passwords are stored only as salted one-way hashes and are never visible to us.
Tenant isolation: each company’s data is separated so that one company cannot access another company’s data through the Service.
Access control: administrative access to production systems is limited and used only to operate and support the Service.

4. Sub-processors

We rely on reputable third-party infrastructure providers to run the Service. These may include, for example, cloud hosting, database, object-storage and email-delivery providers. Each processes data only as needed to provide their part of the Service.

5. Data retention and deletion

We keep Customer Data for as long as your account is active. A company owner can delete their company account at any time from the app, which permanently removes that company’s data from the Service. Backups and logs are cycled out in the ordinary course of operations.

6. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data. You can export your company’s data from the app at any time, and delete your account to remove it. For other requests, contact us using the details below.

7. International data transfer

We use cloud infrastructure that may store and process your data on servers located in countries other than your own. By using the Service, you consent to the transfer, storage and processing of your data in those locations. We take reasonable steps to ensure your data is handled securely wherever it is processed.

8. Children

The Service is intended for business use by adults and is not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact us and we will remove it.

9. Security disclaimer

We take reasonable, industry-standard measures to protect your data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for the activity that occurs under your account. Please see our Terms of Service for the limitation of liability that applies in the event of a security incident.

10. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by notice in the app.

11. Contact

Questions about this Policy or your data can be sent to privacy@ecx-commissioning.com.

Read the Terms of Service →